diff --git a/domain.te b/domain.te
index 9336644..439bde7 100644
--- a/domain.te
+++ b/domain.te
@@ -5,7 +5,7 @@
 
 # Read access to properties mapping.
 allow domain kernel:fd use;
-allow domain tmpfs:file read;
+allow domain tmpfs:file { read getattr };
 
 # binder adjusts the nice value during IPC.
 allow domain self:capability sys_nice;